CVE-2023-28398

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor who successfully exploits this vulnerability could gain access to the pump controller and cause disruption in operation, modify data, or shut down the controller.

• CWE-287

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06Third Party Advisory, US Government Resource

Published

Mar 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28392Wi-Fi AP UNIT AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM …7.2
• CVE-2023-28393A stack-based buffer overflow vulnerability exists in the ti…8.8
• CVE-2023-28394Beekeeper Studio versions prior to 3.9.9 allows a remote aut…8.8
• CVE-2023-28395Osprey Pump Controller version 1.01 is vulnerable to a weak …7.5
• CVE-2023-28396Improper access control in firmware for some Intel(R) Thunde…6.1
• CVE-2023-28397Improper access control in some Intel(R) Aptio* V UEFI Firmw…7.8
• CVE-2023-28399Incorrect permission assignment for critical resource exists…7.8
• CVE-2023-2840NULL Pointer Dereference in GitHub repository gpac/gpac prio…9.8
• CVE-2023-28400mySCADA myPRO versions 8.26.0 and prior has parameters which…8.8
• CVE-2023-28401Out-of-bounds write in some Intel(R) Arc(TM) & Iris(R) Xe Gr…7.8
• CVE-2023-28402Improper input validation in some Intel(R) BIOS Guard firmwa…7.2
• CVE-2023-28404Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Grap…5.5